create_lifecycle_policy(**kwargs)¶Creates a policy to manage the lifecycle of the specified Amazon Web Services resources. You can create up to 100 lifecycle policies.
See also: AWS API Documentation
Request Syntax
response = client.create_lifecycle_policy(
ExecutionRoleArn='string',
Description='string',
State='ENABLED'|'DISABLED',
PolicyDetails={
'PolicyType': 'EBS_SNAPSHOT_MANAGEMENT'|'IMAGE_MANAGEMENT'|'EVENT_BASED_POLICY',
'ResourceTypes': [
'VOLUME'|'INSTANCE',
],
'ResourceLocations': [
'CLOUD'|'OUTPOST',
],
'TargetTags': [
{
'Key': 'string',
'Value': 'string'
},
],
'Schedules': [
{
'Name': 'string',
'CopyTags': True|False,
'TagsToAdd': [
{
'Key': 'string',
'Value': 'string'
},
],
'VariableTags': [
{
'Key': 'string',
'Value': 'string'
},
],
'CreateRule': {
'Location': 'CLOUD'|'OUTPOST_LOCAL',
'Interval': 123,
'IntervalUnit': 'HOURS',
'Times': [
'string',
],
'CronExpression': 'string'
},
'RetainRule': {
'Count': 123,
'Interval': 123,
'IntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS'
},
'FastRestoreRule': {
'Count': 123,
'Interval': 123,
'IntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS',
'AvailabilityZones': [
'string',
]
},
'CrossRegionCopyRules': [
{
'TargetRegion': 'string',
'Target': 'string',
'Encrypted': True|False,
'CmkArn': 'string',
'CopyTags': True|False,
'RetainRule': {
'Interval': 123,
'IntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS'
},
'DeprecateRule': {
'Interval': 123,
'IntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS'
}
},
],
'ShareRules': [
{
'TargetAccounts': [
'string',
],
'UnshareInterval': 123,
'UnshareIntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS'
},
],
'DeprecateRule': {
'Count': 123,
'Interval': 123,
'IntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS'
},
'ArchiveRule': {
'RetainRule': {
'RetentionArchiveTier': {
'Count': 123,
'Interval': 123,
'IntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS'
}
}
}
},
],
'Parameters': {
'ExcludeBootVolume': True|False,
'NoReboot': True|False,
'ExcludeDataVolumeTags': [
{
'Key': 'string',
'Value': 'string'
},
]
},
'EventSource': {
'Type': 'MANAGED_CWE',
'Parameters': {
'EventType': 'shareSnapshot',
'SnapshotOwner': [
'string',
],
'DescriptionRegex': 'string'
}
},
'Actions': [
{
'Name': 'string',
'CrossRegionCopy': [
{
'Target': 'string',
'EncryptionConfiguration': {
'Encrypted': True|False,
'CmkArn': 'string'
},
'RetainRule': {
'Interval': 123,
'IntervalUnit': 'DAYS'|'WEEKS'|'MONTHS'|'YEARS'
}
},
]
},
]
},
Tags={
'string': 'string'
}
)
[REQUIRED]
The Amazon Resource Name (ARN) of the IAM role used to run the operations specified by the lifecycle policy.
[REQUIRED]
A description of the lifecycle policy. The characters ^[0-9A-Za-z _-]+$ are supported.
[REQUIRED]
The desired activation state of the lifecycle policy after creation.
[REQUIRED]
The configuration details of the lifecycle policy.
[All policy types] The valid target resource types and actions a policy can manage. SpecifyEBS_SNAPSHOT_MANAGEMENTto create a lifecycle policy that manages the lifecycle of Amazon EBS snapshots. SpecifyIMAGE_MANAGEMENTto create a lifecycle policy that manages the lifecycle of EBS-backed AMIs. SpecifyEVENT_BASED_POLICYto create an event-based policy that performs specific actions when a defined event occurs in your Amazon Web Services account.
The default is EBS_SNAPSHOT_MANAGEMENT .
[Snapshot policies only] The target resource type for snapshot and AMI lifecycle policies. UseVOLUMEto create snapshots of individual volumes or useINSTANCEto create multi-volume snapshots from the volumes for an instance.
[Snapshot and AMI policies only] The location of the resources to backup. If the source resources are located in an Amazon Web Services Region, specifyCLOUD. If the source resources are located on an Outpost in your account, specifyOUTPOST.
If you specify OUTPOST , Amazon Data Lifecycle Manager backs up all resources of the specified type with matching target tags across all of the Outposts in your account.
[Snapshot and AMI policies only] The single tag that identifies targeted resources for this policy.
Specifies a tag for a resource.
The tag key.
The tag value.
[Snapshot and AMI policies only] The schedules of policy-defined actions for snapshot and AMI lifecycle policies. A policy can have up to four schedules—one mandatory schedule and up to three optional schedules.
[Snapshot and AMI policies only] Specifies a schedule for a snapshot or AMI lifecycle policy.
The name of the schedule.
Copy all user-defined tags on a source volume to snapshots of the volume created by this policy.
The tags to apply to policy-created resources. These user-defined tags are in addition to the Amazon Web Services-added lifecycle tags.
Specifies a tag for a resource.
The tag key.
The tag value.
[AMI policies and snapshot policies that target instances only] A collection of key/value pairs with values determined dynamically when the policy is executed. Keys may be any valid Amazon EC2 tag key. Values must be in one of the two following formats:$(instance-id)or$(timestamp). Variable tags are only valid for EBS Snapshot Management – Instance policies.
Specifies a tag for a resource.
The tag key.
The tag value.
The creation rule.
[Snapshot policies only] Specifies the destination for snapshots created by the policy. To create snapshots in the same Region as the source resource, specifyCLOUD. To create snapshots on the same Outpost as the source resource, specifyOUTPOST_LOCAL. If you omit this parameter,CLOUDis used by default.
If the policy targets resources in an Amazon Web Services Region, then you must create snapshots in the same Region as the source resource. If the policy targets resources on an Outpost, then you can create snapshots on the same Outpost as the source resource, or in the Region of that Outpost.
The interval between snapshots. The supported values are 1, 2, 3, 4, 6, 8, 12, and 24.
The interval unit.
The time, in UTC, to start the operation. The supported format is hh:mm.
The operation occurs within a one-hour window following the specified time. If you do not specify a time, Amazon Data Lifecycle Manager selects a time within the next 24 hours.
The schedule, as a Cron expression. The schedule interval must be between 1 hour and 1 year. For more information, see Cron expressions in the Amazon CloudWatch User Guide .
The retention rule for snapshots or AMIs created by the policy.
The number of snapshots to retain for each volume, up to a maximum of 1000. For example if you want to retain a maximum of three snapshots, specify 3 . When the fourth snapshot is created, the oldest retained snapshot is deleted, or it is moved to the archive tier if you have specified an ArchiveRule.
The amount of time to retain each snapshot. The maximum is 100 years. This is equivalent to 1200 months, 5200 weeks, or 36500 days.
The unit of time for time-based retention. For example, to retain snapshots for 3 months, specify Interval=3 and IntervalUnit=MONTHS . Once the snapshot has been retained for 3 months, it is deleted, or it is moved to the archive tier if you have specified an ArchiveRule.
[Snapshot policies only] The rule for enabling fast snapshot restore.
The number of snapshots to be enabled with fast snapshot restore.
The amount of time to enable fast snapshot restore. The maximum is 100 years. This is equivalent to 1200 months, 5200 weeks, or 36500 days.
The unit of time for enabling fast snapshot restore.
The Availability Zones in which to enable fast snapshot restore.
Specifies a rule for copying snapshots or AMIs across regions.
Note
You can't specify cross-Region copy rules for policies that create snapshots on an Outpost. If the policy creates snapshots in a Region, then snapshots can be copied to up to three Regions or Outposts.
[Snapshot and AMI policies only] Specifies a cross-Region copy rule for snapshot and AMI policies.
Note
To specify a cross-Region copy action for event-based polices, use CrossRegionCopyAction.
Note
Avoid using this parameter when creating new policies. Instead, use Target to specify a target Region or a target Outpost for snapshot copies.
For policies created before the Target parameter was introduced, this parameter indicates the target Region for snapshot copies.
The target Region or the Amazon Resource Name (ARN) of the target Outpost for the snapshot copies.
Use this parameter instead of TargetRegion . Do not specify both.
To encrypt a copy of an unencrypted snapshot if encryption by default is not enabled, enable encryption using this parameter. Copies of encrypted snapshots are encrypted, even if this parameter is false or if encryption by default is not enabled.
The Amazon Resource Name (ARN) of the KMS key to use for EBS encryption. If this parameter is not specified, the default KMS key for the account is used.
Indicates whether to copy all user-defined tags from the source snapshot or AMI to the cross-Region copy.
The retention rule that indicates how long the cross-Region snapshot or AMI copies are to be retained in the destination Region.
The amount of time to retain a cross-Region snapshot or AMI copy. The maximum is 100 years. This is equivalent to 1200 months, 5200 weeks, or 36500 days.
The unit of time for time-based retention. For example, to retain a cross-Region copy for 3 months, specify Interval=3 and IntervalUnit=MONTHS .
[AMI policies only] The AMI deprecation rule for cross-Region AMI copies created by the rule.
The period after which to deprecate the cross-Region AMI copies. The period must be less than or equal to the cross-Region AMI copy retention period, and it can't be greater than 10 years. This is equivalent to 120 months, 520 weeks, or 3650 days.
The unit of time in which to measure the Interval . For example, to deprecate a cross-Region AMI copy after 3 months, specify Interval=3 and IntervalUnit=MONTHS .
[Snapshot policies only] The rule for sharing snapshots with other Amazon Web Services accounts.
[Snapshot policies only] Specifies a rule for sharing snapshots across Amazon Web Services accounts.
The IDs of the Amazon Web Services accounts with which to share the snapshots.
The period after which snapshots that are shared with other Amazon Web Services accounts are automatically unshared.
The unit of time for the automatic unsharing interval.
[AMI policies only] The AMI deprecation rule for the schedule.
If the schedule has a count-based retention rule, this parameter specifies the number of oldest AMIs to deprecate. The count must be less than or equal to the schedule's retention count, and it can't be greater than 1000.
If the schedule has an age-based retention rule, this parameter specifies the period after which to deprecate AMIs created by the schedule. The period must be less than or equal to the schedule's retention period, and it can't be greater than 10 years. This is equivalent to 120 months, 520 weeks, or 3650 days.
The unit of time in which to measure the Interval .
[Snapshot policies that target volumes only] The snapshot archiving rule for the schedule. When you specify an archiving rule, snapshots are automatically moved from the standard tier to the archive tier once the schedule's retention threshold is met. Snapshots are then retained in the archive tier for the archive retention period that you specify.
For more information about using snapshot archiving, see Considerations for snapshot lifecycle policies.
Information about the retention period for the snapshot archiving rule.
Information about retention period in the Amazon EBS Snapshots Archive. For more information, see Archive Amazon EBS snapshots.
The maximum number of snapshots to retain in the archive storage tier for each volume. The count must ensure that each snapshot remains in the archive tier for at least 90 days. For example, if the schedule creates snapshots every 30 days, you must specify a count of 3 or more to ensure that each snapshot is archived for at least 90 days.
Specifies the period of time to retain snapshots in the archive tier. After this period expires, the snapshot is permanently deleted.
The unit of time in which to measure the Interval . For example, to retain a snapshots in the archive tier for 6 months, specify Interval=6 and IntervalUnit=MONTHS .
[Snapshot and AMI policies only] A set of optional parameters for snapshot and AMI lifecycle policies.
Note
If you are modifying a policy that was created or previously modified using the Amazon Data Lifecycle Manager console, then you must include this parameter and specify either the default values or the new values that you require. You can't omit this parameter or set its values to null.
[Snapshot policies that target instances only] Indicates whether to exclude the root volume from multi-volume snapshot sets. The default isfalse. If you specifytrue, then the root volumes attached to targeted instances will be excluded from the multi-volume snapshot sets created by the policy.
[AMI policies only] Indicates whether targeted instances are rebooted when the lifecycle policy runs.trueindicates that targeted instances are not rebooted when the policy runs.falseindicates that target instances are rebooted when the policy runs. The default istrue(instances are not rebooted).
[Snapshot policies that target instances only] The tags used to identify data (non-root) volumes to exclude from multi-volume snapshot sets.
If you create a snapshot lifecycle policy that targets instances and you specify tags for this parameter, then data volumes with the specified tags that are attached to targeted instances will be excluded from the multi-volume snapshot sets created by the policy.
Specifies a tag for a resource.
The tag key.
The tag value.
[Event-based policies only] The event that activates the event-based policy.
The source of the event. Currently only managed CloudWatch Events rules are supported.
Information about the event.
The type of event. Currently, only snapshot sharing events are supported.
The IDs of the Amazon Web Services accounts that can trigger policy by sharing snapshots with your account. The policy only runs if one of the specified Amazon Web Services accounts shares a snapshot with your account.
The snapshot description that can trigger the policy. The description pattern is specified using a regular expression. The policy runs only if a snapshot with a description that matches the specified pattern is shared with your account.
For example, specifying ^.*Created for policy: policy-1234567890abcdef0.*$ configures the policy to run only if snapshots created by policy policy-1234567890abcdef0 are shared with your account.
[Event-based policies only] The actions to be performed when the event-based policy is activated. You can specify only one action per policy.
[Event-based policies only] Specifies an action for an event-based policy.
A descriptive name for the action.
The rule for copying shared snapshots across Regions.
[Event-based policies only] Specifies a cross-Region copy action for event-based policies.
Note
To specify a cross-Region copy rule for snapshot and AMI policies, use CrossRegionCopyRule.
The target Region.
The encryption settings for the copied snapshot.
To encrypt a copy of an unencrypted snapshot when encryption by default is not enabled, enable encryption using this parameter. Copies of encrypted snapshots are encrypted, even if this parameter is false or when encryption by default is not enabled.
The Amazon Resource Name (ARN) of the KMS key to use for EBS encryption. If this parameter is not specified, the default KMS key for the account is used.
Specifies a retention rule for cross-Region snapshot copies created by snapshot or event-based policies, or cross-Region AMI copies created by AMI policies. After the retention period expires, the cross-Region copy is deleted.
The amount of time to retain a cross-Region snapshot or AMI copy. The maximum is 100 years. This is equivalent to 1200 months, 5200 weeks, or 36500 days.
The unit of time for time-based retention. For example, to retain a cross-Region copy for 3 months, specify Interval=3 and IntervalUnit=MONTHS .
The tags to apply to the lifecycle policy during creation.
dict
Response Syntax
{
'PolicyId': 'string'
}
Response Structure
(dict) --
PolicyId (string) --
The identifier of the lifecycle policy.
Exceptions
DLM.Client.exceptions.InvalidRequestExceptionDLM.Client.exceptions.LimitExceededExceptionDLM.Client.exceptions.InternalServerException